N-able keeps N-central offline after Able2Shell disclosure
November 10: TechCrunch and Cyber Security News say a spokesperson would not confirm whether N-able can review logs, and name the researcher Ben Bales rather than Sean.
Hosted N-central remains offline and self-hosted servers stay down; N-able reports no confirmed exploitation.
N-able is keeping hosted N-central offline in the Americas, Europe and Asia-Pacific and told customers to keep on-premises servers shut down after a researcher published Able2Shell proof-of-concept exploits on GitHub without coordinated disclosure. Huntress counts 33 critical flaws on Appliance 2026.4.0.31, and possibly earlier, chaining into three remote-code-execution paths and one root escalation; others describe more than 30 issues. BleepingComputer, The Hacker News and SecurityWeek name the researcher Sean Bales; TechCrunch and Cyber Security News say Ben Bales. As of November 10, N-able reported PoC-related scanning but no confirmed customer compromises. No CVE identifiers, scores or fixed build have been published; a hotfix was targeted for midday November 10 EST.
- Incident 202561 covers hosted outages in the Americas, Europe and Asia-Pacific.
- Issues include authentication bypass, XXE, XSS, credential disclosure and file writes.
- N-able reported no exploitation as of 15:15 UTC on November 9.
- Customers were told to review authentication activity from November 8.
- Live hotfixes may not change the displayed N-central version.
- Ecoverse services accessed through N-able Login remain operational.
Timeline
dated events in the reporting · oldest first- Nov 8, 2026Researcher published the Able2Shell repository on GitHub. · BleepingComputer
- Nov 9, 2026N-able opened Incident 202561 and took hosted N-central offline. · GBHackers
- Nov 9, 2026N-able said it had seen no exploitation as of 15:15 UTC. · Huntress
- Nov 10, 2026N-able reported PoC-related scanning but no confirmed compromises. · Rapid7
What each outlet adds
beyond the shared facts- HuntressCounts 33 flaws in four exploit chains.
- BleepingComputerNames Sean Bales and details an unauthenticated XXE chain.
- GBHackersIncident 202561 and updates every four hours.
- Rapid7Reports PoC scanning without confirmed compromises.
- TechCrunchNames Ben Bales; spokesperson silent on log review.
- Vendors
- N-able
- Malware
- Able2Shell
Coverage
oldest first · one row per article · UTC- · 1d ago
HuntressFirst report
N-able takes hosted N-central offline after Able2Shell disclosure
A researcher posted 33 critical N-central flaws chaining into three RCE paths and one root escalation; N-able reports no exploitation yet.
- · 1d ago
BleepingComputer
N-able takes N-central offline after 30-plus exploit PoCs published
Researcher Sean Bales posted Able2Shell proof-of-concept exploits; N-able says it has seen no active exploitation.
- · 1d ago
Cyber Security News
N-able takes N-central offline after Able2Shell exploit release
Hosted service in the Americas, Europe, and Asia-Pacific was shut down; N-able said it had not seen active exploitation.
- · 22h ago
GBHackers
N-able takes N-central offline after disclosure of 33 critical flaws
Hosted consoles are down in the Americas, APAC, and Europe; on-premises customers were told to shut servers down.
- · 20h ago
The Hacker News
N-able takes hosted N-central offline after Able2Shell disclosure
Sean Bales published PoCs for more than 30 flaws; N-able says it has seen no active exploitation.
- · 17h ago
SecurityWeek
N-able takes hosted N-central offline after 30-plus zero-day drop
Sean Bales published Able2Shell proof-of-concept code; N-able reports no exploitation and expects a hotfix around midday November 10.
- · 13h ago
Rapid7 Blog
N-able takes hosted N-central offline after Able2Shell PoC release
A researcher published proof-of-concept code for 33 issues, including unauthenticated RCE; N-able reports scanning but no confirmed compromises.
- · 11h ago
TechCrunch · Security
N-able takes N-Central offline after dozens of zero-days published
N-able told customers to shut down self-hosted N-Central and reports no evidence of successful exploitation.
- · 11h ago
N-able takes N-Central offline after published zero-day bugs
Hosted N-Central is down, and customers were told to shut self-hosted installs while fixes are applied.